PRIVACY
Privacy policy
Last updated: November 12, 2026
Dappleday helps you see where your time goes. To do that we keep your account, the work you choose to track, and the services you choose to connect. We do not sell your data, show ads, or track you outside the timer you start yourself. Questions: info@dappleday.com.
What we collect
- Account. Your email address, the time zone of the browser you registered from, when the account was created and when your trial ends.
- Sign-in. If you add a passkey, we store its public key and the date you added it. Your fingerprint, face or device PIN never leave your device. Sign-in links and browser sessions are stored only as one-way hashes.
- Your work. Buckets, timed sessions, their descriptions, inbox tasks, colours, work hours and other settings you enter.
- Connected services, only if you connect them.
- Google Calendar: access tokens, your calendar list and the events of the calendars you select, read-only and cached briefly.
- Apple iCloud Calendar: your Apple ID email and the app-specific password you enter, so we can read the calendars you select.
- GitHub: an access token, the repositories you select, and the titles and links of issues you attach to your work.
- Technical data. Our server logs record IP addresses of requests. To limit abuse of sign-in emails we keep short-lived counters keyed by a hash of your IP address and email address.
Why we use it
- To provide the service you signed up for: your workspace, reports, sign-in and the integrations you enable.
- To keep the service secure: human verification, rate limits and protection against abuse.
- To run the early-access programme: we are notified when you register, when your trial ends and when you request a subscription, so we can contact you by email.
- To email you about Dappleday itself, such as new features and offers. You can unsubscribe at any time by replying to such an email or writing to info@dappleday.com; sign-in emails are not affected.
- To power optional features built on machine learning models. For such a feature, only the data it needs, for example session descriptions, is sent to an AI provider that processes it on our behalf and does not use it to train its models.
Cookies and browser storage
We use one cookie: a strictly necessary session cookie that keeps you signed in for up to 180 days or until you sign out. The app also stores interface preferences in your browser, such as sort order and report filters. There are no advertising or analytics trackers in the app.
Who processes your data
- Cloudflare delivers this website and our network traffic, and runs Turnstile, the human check on the sign-in page.
- Resend delivers sign-in emails to your address.
- Telegram carries our internal notifications, which include your email address and account ID, when you register, when your trial ends and when you request a subscription.
- Our hosting provider runs the server and database where your account and work are stored.
- Google, Apple and GitHub receive requests from us only for services you connect, under their own privacy policies.
- AI providers receive data only when you use a feature built on them. We will name them here before such a feature launches.
These providers may process data outside your country.
How long we keep it
- Your account, work and connections: until you delete the account. You can disconnect any integration at any time in Settings.
- Sign-in links: 15 minutes or until used. Browser sessions: up to 180 days or until you sign out.
- Abuse counters: from one minute to one day.
- Server logs: rotated automatically after a small size limit.
Your rights
You can export your work at any time in Settings → Data. To correct or delete your account and all its data, or to ask what we hold about you, email info@dappleday.com from your account address. Depending on where you live, you may also object to processing or complain to your data protection authority.
Pricing and payments
New accounts get two months free, then Dappleday costs $5 per month. No card is needed for the trial and we currently do not process payments. When we do, we will update this policy before you are charged.
Children
Dappleday is not intended for children under 16.
Changes
If we change this policy, we will update the date above and tell you by email about significant changes.